leastprivilege.com
Beware the combined authorize filter mechanics in ASP.NET Core 2.1
Reblogged on WordPress.com